Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
File: FFdMbIw3bumzwcilrbdcuMJo_6o.cer (raw, json)
Hash identifier: xlKKUkIRGBC1aA0afpHPzu5+vn87Sq9OuUXcBaJHjv4=
Subject key identifier: 14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A2E9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Mar 2026 13:32:53 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 140910
IP: 103.153.90.0/23
IP: 2001:df6:cbc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172777 (0x2a2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 6 13:32:53 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A915CBC5, serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:37:87:47:6e:57:21:90:e2:8b:fd:9c:6d:
43:64:07:4e:44:3d:dd:8f:be:08:26:5a:74:00:ec:
fe:b4:4f:f4:39:b9:4b:7a:72:eb:c1:81:0c:a8:a7:
1f:1e:2d:4f:2b:7b:00:5b:c3:1d:d1:d2:95:b6:17:
d5:f7:7f:fb:23:5a:3d:9d:ee:3d:e5:e3:95:ba:81:
20:a3:5f:90:5c:e3:29:88:53:40:0e:26:d5:f6:92:
62:58:28:df:55:e4:e8:98:d3:43:7b:3f:0b:f3:a0:
dc:d4:71:02:82:92:2a:93:a3:7a:78:4f:83:de:0e:
69:f2:75:b3:4c:c2:a3:66:28:8a:7c:64:f0:c3:5e:
a0:30:c5:e3:79:1f:0e:3b:4a:6e:f9:d5:f6:54:a3:
af:30:41:b5:58:18:c9:9f:9c:3a:3c:f5:d3:c9:30:
82:fa:fc:d8:da:f1:b0:17:48:27:04:bd:65:08:1c:
22:cb:0f:63:b3:1d:b2:cb:43:92:77:28:fb:68:08:
f4:9b:7a:87:44:cb:0d:01:9c:c3:5e:6c:ec:10:81:
a3:3a:21:b0:bf:59:d1:4d:07:e4:d9:fb:9a:4c:e0:
8b:21:7f:9e:29:b1:8f:f7:fd:fe:34:1f:04:15:64:
ce:bb:cf:63:f5:25:52:46:70:62:e6:82:ec:81:83:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140910
sbgp-ipAddrBlock: critical
IPv4:
103.153.90.0/23
IPv6:
2001:df6:cbc0::/48
Signature Algorithm: sha256WithRSAEncryption
33:2f:bb:95:55:26:04:0a:f9:1e:bc:e8:58:44:fd:95:f0:a0:
e3:3d:dd:59:ae:5b:44:e2:7c:af:91:90:52:0d:8d:11:cb:54:
d8:f0:21:eb:08:dc:35:81:84:9b:f9:ad:e5:34:70:26:aa:ec:
82:d8:3c:29:97:9b:f7:ec:61:fa:17:30:1b:ab:d3:2f:29:de:
13:5f:1d:c5:14:6c:4b:e8:0b:bd:47:7d:f4:d3:8e:6f:e3:e5:
ee:14:1f:c9:62:73:7c:ee:63:de:d5:67:eb:aa:92:c9:cb:dc:
1f:35:92:73:28:02:c0:d8:07:5c:2d:46:a6:3d:84:60:08:c0:
27:d2:4f:0c:90:5b:8d:d8:73:4f:c3:b2:08:9e:e6:05:98:8a:
15:2e:83:03:c7:2b:27:ca:8c:a1:fc:1e:24:21:6f:87:49:e4:
37:d3:76:5f:42:3e:69:4e:7f:5d:86:44:57:ce:9d:f8:95:28:
41:f2:03:b7:73:de:d0:84:a7:2a:dd:12:95:f7:c7:45:11:c2:
ca:8e:5b:f8:ef:91:f4:62:13:0e:a9:08:0d:d6:1a:c9:1f:70:
8e:3b:c1:7c:72:db:98:fc:77:41:cd:80:e6:1b:dc:27:c2:69:
81:f4:af:18:21:43:3c:57:95:6d:4f:63:8d:4a:ee:d5:8c:d9:
0c:3b:50:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:58 2026 by rpki-client